Analysis
-
max time kernel
135s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21-05-2023 19:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f96dbff0100197b83a77916433c9496645a5bcbcf0a43d1bc2f21c198bb9d8aa.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
f96dbff0100197b83a77916433c9496645a5bcbcf0a43d1bc2f21c198bb9d8aa.dll
-
Size
1.2MB
-
MD5
5aed906ef7ee758cac970429d4ce9967
-
SHA1
1dafb66827bb41283ac50c0b7c2eca2f36246f49
-
SHA256
f96dbff0100197b83a77916433c9496645a5bcbcf0a43d1bc2f21c198bb9d8aa
-
SHA512
70b79af43e6312fe410aa852ca183e886a37f458f521a17125530a8f84120fdfe905b16ea28067e33b8d6006153ae4bda41286eac0d985c03655d7ec53c3eef0
-
SSDEEP
24576:3e7b256IJI5tQO48+LnlOSN9QlIlnxXpcmL4fyYzJ9s:mhoP8+ZOS7lnxXC3e
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5060 2076 WerFault.exe 31
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\f96dbff0100197b83a77916433c9496645a5bcbcf0a43d1bc2f21c198bb9d8aa.dll,#11⤵PID:2076
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2076 -s 3282⤵
- Program crash
PID:5060
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 460 -p 2076 -ip 20761⤵PID:2032